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CLAIMS 




1. A metihod for authenticating a printed document comprising 
the following steps: 

a) a document producer sends information to be included in a 
document\to an authentication authority; 

b) the authentication authority cryptographically generates an 
authentication code from this information, and sends the 
authentication code back to the document producer; 

c) the document producer prints the document, including both the 
information and the authentication code; and 

d) a document checker cryptographically checks the authentication 
code against ryhe information in the document 

2. A method according to Claim 1 wherein the document producer 
includes a bar code in the document, said bar code containing 
the authentication code, and wherein the document authenticator 
is provided with mea\is for reading the bar code to obtain the 
authentication code . 



3. A method according to Claim 1 wherein the document includes a 
pre-printed serial number, which is sent to said authentication 
authority, and wherein aaid authentication authority uses said 
pre-printed serial numbe^ in generating said authentication 
code . 



4. A method according to C]\aim 3 wherein said pre-printed serial 
number is included in said document as a pre-printed bar code. 



5. A method according to Claim 
uses a combined printer and ba 
printed bar code and then to p 



4 wherein the document producer 
-code scanner to read said pre- 
dnt said document. 
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6. A method according to Claim 1 wherein said document checker 
performs the following steps: 

a) entering said authentication code into a computer; 

b) entering information in the document into the computer; 

c) causing the computer to cryptographically generate a check 
code from said information; and 

d) causing the computer to compare said check code with said 
authentication code and to generate a warning indication if said 
check code\does not correspond with said authentication code. 
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7. A method\ according to Claim 1 wherein said authentication 
authority cryptographically generates said authentication code 
using a cryptographic key associated with said authentication 
authority . 
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10. A method according to Claim 7 wherein said authentication 
authority generates said authentication code using the private 
key of a public/private key pair, and wherein the document 
checker checks the\ authentication code using the public key of 
said public/private key pair. 

11. A method according to Claim 1 wherein communication between 
said document producer and said authentication authority is 
protected by encryption . 



12. A method according! to Claim 1 wherein the document producer 
can specify an option af having the certificate printed by said 
authentication authority instead of printing the certificate 
locally. 
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13. Apparatus for authenticating a printed document, 
comprising : 

a) a plurality of document producer stations; 

b) at least one authentication service; and 

c) a plurality of document checker stations; 

d) wherein teach document producer station includes means for 
inputting information to be included in a document, and means 
for sendihg said information to said authentication service; 

e) wherein ttte authentication service includes means for 
cryptograpkically generating an authentication code from this 
information^, and means for sending the authentication code 
back to the \document producer staion; 

f) wherein each! document producer station includes means for 
printing the \document, including both the information and the 
authentication code ; 

g) and wherein each document checker station includes means for 
cryptographically checking the authentication code against the 
information in ithe document. 

14. Apparatus according to Claim 13 wherein each of said 
document producer stations includes a combined printer and bar 
code scanner for reWding from said document a pre-printed bar 
code containing a serial number. 

15. Apparatus according to Claim 13 wherein each of said 
document producer stations includes means for printing bar codes 
on documents, and wherein each of said document checker stations 
includes a bar code reader for reading bar codes from documents. 



